Skip to content
OpenAdvisories
Critical · 9.9 CVE-2025-30841 EUVD-2025-9484GHSA-q3c3-9cvm-mvh9

WordPress Countdown & Clock plugin <=2.8.8 - Remote Code Execution (RCE) vulnerability

Published Apr 1, 2025 · Updated Apr 29, 2026 · Assigned by Patchstack

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in adamskaat Countdown & Clock countdown-builder allows Remote Code Inclusion.This issue affects Countdown & Clock: from n/a through <= 2.8.8.

Affected products

VendorProductAffectedFixed
adamskaat Countdown & Clock ≤ 2.8.8 —

References